USN-4249-1: e2fsprogs vulnerability
It was discovered that e2fsprogs incorrectly handled certain ext4 partitions. An attacker could possibly use this issue to execute arbitrary code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/e2fsprogsto a version that resolves this vulnerability.Fixed in 1.45.3-4ubuntu2.1 - Upgrade
Upgrade
ubuntu/e2fsprogsto a version that resolves this vulnerability.Fixed in 1.44.6-1ubuntu0.2 - Upgrade
Upgrade
ubuntu/e2fsprogsto a version that resolves this vulnerability.Fixed in 1.44.1-1ubuntu1.3 - Upgrade
Upgrade
ubuntu/e2fsprogsto a version that resolves this vulnerability.Fixed in 1.42.13-1ubuntu1.2 - Upgrade
Upgrade
ubuntu/e2fsprogsto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/e2fsprogsto a version that resolves this vulnerability.Fixed in 1.42-1ubuntu2.5
Event History
Frequently Asked Questions
What is the severity of USN-4249-1?
USN-4249-1 has the potential to allow an attacker to execute arbitrary code.
How do I fix USN-4249-1?
To mitigate the USN-4249-1 vulnerability, update the e2fsprogs package to the latest version provided in the advisory.
Which Ubuntu versions are affected by USN-4249-1?
USN-4249-1 impacts Ubuntu versions 12.04, 14.04, 16.04, 18.04, 19.04, and 19.10.
What is the cause of the USN-4249-1 vulnerability?
The USN-4249-1 vulnerability is caused by e2fsprogs incorrectly handling certain ext4 partitions.
Is the USN-4249-1 vulnerability being actively exploited?
There is a possibility that the USN-4249-1 vulnerability could be exploited, making it important to apply the patches.